This Website Privacy Policy (this “Privacy Policy”) describes how we gather and use information for visitors of this website. Please read this Privacy Policy carefully. If you do not agree with any of the terms and conditions contained herein, please do not access or otherwise use this website.

This Privacy Policy constitutes a legally binding agreement between Prysm and you, the user of this website. By entering and using this website, you acknowledge your acceptance of, and agree to be bound by, the Privacy Policy stated herein and all additional terms incorporated by reference herein. If you do not agree to this Privacy Policy, please do not access or use this website.

THE INFORMATION WE COLLECT AND HOW WE USE IT

We may collect various types of information from users of this website. For example, knowing how users use our website – tracking their movement through this website – helps us improve website design and usefulness. As a result, Prysm’s server collects general data pertaining to users, including the length of time spent on this website, the pages accessed while visiting the website and Internet Protocol (IP) addresses. Prysm generally does not, however, collect any personally identifiable information such as names, home addresses or e-mail addresses from users of this website, unless a user submits such information to us via our “Contact” page.

To the extent that you provide us with any personally identifiable information through or in connection with this website, we may use such information for Prysm’s business purposes, but will not disclose any personally identifiable information about you to anyone, except as permitted or required by law or regulation and to service providers. In providing personally identifiable information to Prysm, you consent to Prysm’s use of such personally identifiable information for the purposes described in this Privacy Policy.

Unfortunately, the transmission of information and data via the Internet is not completely secure. Although we make an effort to protect your personal data, we cannot guarantee the security of any information or data transmitted to or through our website; any transmission of information or data by you to or through this website is at your sole risk.

CAPACITY

You represent to Prysm that you have the authority to visit this website. This website is only intended for individuals who are at least 18 years of age. We do not knowingly encourage or solicit visitors to this website who are under the age of 18 or knowingly collect personal information from anyone under the age of 18 without parental consent. If we learn we have collected or received personal information from an individual under the age of 18, we will delete that information.

COOKIES

Information regarding how you access this website (e.g., browser type, access times and Internet Protocol (IP) address) and your hardware and software is automatically collected through the use of cookies (a small text file placed on your hard drive) or other technologies or tools. This information is used to improve website performance and for our business purposes. Where cookies are not necessary for us to provide the products or services you have requested or for the functioning of this website, we will ask you to consent to their use. You may opt-in to accept cookies automatically by changing the settings on your browser. If you opt-out of certain cookies, you may not be able to access certain parts of this website. You may wish to visit www.aboutcookies.org, which contains comprehensive information about types of cookies, how they are used and how you manage your cookie preferences.

You may access any personally identifiable information we have about you by contacting the Chief Compliance Officer of Prysm at muhammad at prysmcapital dot com.

NOTIFICATION OF CHANGES

We reserve the right to amend this Privacy Policy from time to time and for any reason, in our sole discretion, without notice, by updating this Privacy Policy. Accordingly, users are strongly encouraged to review our Privacy Policy regularly. If we decide to change our Privacy Policy, we will post those changes so our users are always aware of what information we collect, how we use it and under what circumstances, if any, we disclose it. If at any point we decide to collect personal information or use any collected information in a manner different from that stated at the time it was collected, we will notify users by posting changes on this page. We will use information only in accordance with the Privacy Policy under which the information was collected. Your continued access or use of this website following the posting of changes to this Privacy Policy means that you accept such revisions, changes and/or amendments. If you object to any of the changes to this Privacy Policy, please stop accessing this website. Please check this page frequently and review any changes to this Privacy Policy carefully so you are aware of any changes, as they are binding on you.

CONTACT US

If you have any questions or concerns about this Privacy Policy, please contact the Chief Compliance Officer of Prysm at muhammad at prysmcapital dot com.

* * * * * * *

CALIFORNIA WEBSITE PRIVACY POLICY SUPPLEMENT

DATE: April 30, 2020

This California Website Privacy Policy supplements the above Website Privacy Policy with respect to specific rights granted under the California Consumer Privacy Act of 2018 (as amended, the “CCPA”) to natural person California residents and provides information regarding how such California residents can exercise their rights under the CCPA. This supplement is only relevant to you if you are a resident of California as determined in accordance with the CCPA. Information required to be disclosed to California residents under the CCPA regarding the collection of their personal information that is not set forth in this CCPA supplement is otherwise set forth in the Website Privacy Policy. To the extent there is any conflict with the privacy requirements under the Gramm-Leach-Bliley Act and/or Regulation S-P (“GLB Rights”), GLB Rights shall apply.

What does this Website Privacy Policy apply to?

This Website Privacy Policy applies solely to your interactions with us through our Website (as defined below). If you provide personal information to use through another means (e.g., as an employee or seeking employment, as a client, or as an investor) you will receive a separate privacy notice and that notice will govern that personal information.

What information do we collect about you?

We collect limited types of personal information through our website and investor reporting portals, as well as through other electronic communications (e.g., emails), as applicable (collectively, the “Website”). The types of personal information we collect about you depends on the nature of your interaction with us. The categories of personal information we have collected from individuals on this Website over the last twelve (12) months include the following:

• Identifiers, such as name, contact details and address (including physical address, email address and Internet Protocol address);
• Other customer records, such as telephone number and personal information provided in connection with obtaining account access;
• Commercial information, such as account data;
• Professional or employment-related information;
• Education information;
• Internet or other electronic network activity information, such as information regarding your use of our Website (e.g., cookies, browsing history and/or search history), as well as information you provide to us when you correspond with us in relation to inquiries.
We do not knowingly collect or solicit personal information from anyone under the age of 18.

How do we obtain your personal information?

In connection with forming and operating our Website, we collect and maintain your nonpublic personal information from the following sources:

• Information from your communications with us in connection with this Website, including any update notices provided by you.
• Information captured on our Website, including registration information, information provided through online forms and any information captured via cookies.
We may combine personal information that you provide to us with information that we collect from or about you from publicly available sources. This will include information collected in an online or offline context.

How do we use your personal information?

We will use your personal information for one or more of the following business purposes:

• To perform services for you.
• To improve our Website and the products and services that we offer and notify you about changes to our products and services.
• To communicate with you, including responding to requests for information submitted by you through our Website.
• To keep a record of your relationship with us.
• Ongoing operations, administrative, accounting, reporting, account maintenance and other processes.
• To audit and verify the quality and effectiveness of our services and compliance.
• To detect security incidents and to protect against malicious, deceptive, fraudulent, or illegal activity.
• To generally comply with U.S., state, local and non-U.S. laws, rules and regulations.
Additionally, we may use your personal information to keep you informed of our products and services, if you have provided your consent to us doing so, or where we have an existing relationship with you and we wish to contact you about products and services similar to those which we provide you, in which you may be interested.

Who do we share your personal information with?

We do not sell any of the personal information we collect about you to third parties.

We do not disclose any nonpublic personal information about you to anyone, except as permitted or required by law or regulation and to affiliates and service providers, including but not limited to administrators, lenders, banks, auditors, law firms, governmental agencies or pursuant to legal process, self-regulatory organizations, consultants and placement agents. We may also disclose your information to other parties as may be required by law or regulation, or in response to regulatory inquiries.

Within the last twelve (12) months, we have shared each of the categories of personal information collected in connection with this website with affiliates and service providers as set forth above in “What information do we collect about you?”

We may also share your personal information with applicable third parties in the event of a reorganization, merger, sale, acquisition, assignment, bankruptcy proceeding, or other disposition of all or a portion of our business, assets or shares.

How do we keep your personal information secure?

We consider the protection of sensitive information to be a sound business practice, and to that end we employ appropriate organizational, physical, technical and procedural safeguards, which seek to protect your personal information in our possession or under our control to the extent possible from unauthorized access and improper use.

Your rights under the CCPA

Deletion Rights: You have the right to request that we delete any of your personal information that we retain, subject to certain statutory exceptions, including, but not limited to, our compliance with U.S., state, local and non-U.S. laws, rules and regulations. We will notify you in writing if we cannot comply with a specific request and provide an explanation of the reasons.

Disclosure and Access Rights: You have the right to request that we disclose to you certain information regarding our collection and use of personal information specific to you over the last twelve (12) months. Such information includes:

• the categories of personal information we collected about you;
• the categories of sources from which the personal information is collected;
• our business or commercial purpose for collecting such personal information;
• the categories of third parties with whom we share the personal information;
• the specific pieces of personal information we have collected about you; and
• whether we disclosed your personal information to a third party, and, if yes, the categories of personal information that each recipient obtained.
No Discrimination: We will not discriminate against you for exercising your rights under the CCPA, including by denying service, suggesting that you will receive, or charging, different rates for services or suggesting that you will receive, or providing, a different level or quality of service to you.

How to Exercise Your Rights: To exercise any of your rights under the CCPA, or to access this notice in an alternative format, please submit a request on your behalf using any of the methods set forth in the Contact us section below.

Contact us

For any requests relating to the exercise of your rights under the CCPA, or questions regarding our processing of your personal information, please submit or have your authorized representative submit a request via email to the Chief Compliance Officer of Prysm at muhammad at prysmcapital dot com.

We will contact you to confirm receipt of your request under the CCPA and request any additional information necessary to verify your request. We verify requests by matching information provided in connection with your request to information contained in our records. Depending on the sensitivity of the request and the varying levels of risk in responding to such requests (for example, the risk of responding to fraudulent or malicious requests), we may request further information or your investor portal access credentials, if applicable, in order to verify your request. We may also verify your request through a third-party verification service. You may designate an authorized agent to make a request under the CCPA on your behalf, provided that you provide a signed agreement verifying such authorized agent’s authority to make requests on your behalf, and we may verify such authorized person’s identity using the procedures above.

Our goal is to respond to any verifiable consumer request within forty-five (45) days of our receipt of such request, but in certain cases, additional time might be required. Please contact the Chief Compliance Officer of Prysm at muhammad at prysmcapital dot com with any questions about this California Website Privacy Policy.